You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Bearer provides built-in rules against a common set of security risks and vulnerabilities, known as [OWASP Top 10](https://owasp.org/www-project-top-ten/). Here are some practical examples of what those rules look for:
33
+
32
34
* Non-filtered user input.
33
35
* Leakage of sensitive data through cookies, internal loggers, third-party logging services, and into analytics environments.
34
36
* Usage of weak encryption libraries or misusage of encryption algorithms.
Update an existing installation with the following:
67
-
70
+
68
71
```bash
69
72
brew update && brew update bearer/tap/bearer
70
73
```
74
+
71
75
</details>
72
76
73
77
<details>
74
78
<summary>Debian/Ubuntu</summary>
75
79
76
80
```shell
77
-
$ sudo apt-get install apt-transport-https
78
-
$ echo"deb [trusted=yes] https://apt.fury.io/bearer/ /"| sudo tee -a /etc/apt/sources.list.d/fury.list
79
-
$ sudo apt-get update
80
-
$ sudo apt-get install bearer
81
+
sudo apt-get install apt-transport-https
82
+
echo"deb [trusted=yes] https://apt.fury.io/bearer/ /"| sudo tee -a /etc/apt/sources.list.d/fury.list
83
+
sudo apt-get update
84
+
sudo apt-get install bearer
81
85
```
82
86
83
87
Update an existing installation with the following:
88
+
84
89
```bash
85
90
sudo apt-get update
86
91
sudo apt-get install bearer
87
92
```
93
+
94
+
**Known issues**
95
+
96
+
- We are currently investigating an [issue](https://github.com/Bearer/bearer/issues/899) which would prevent Bearer to run correctly. If you encounter this bug, we recommend following the Docker installation instructions.
Update an existing installation with the following:
122
+
110
123
```bash
111
124
sudo yum -y update bearer
112
125
```
126
+
113
127
</details>
114
128
115
129
<details>
@@ -179,9 +193,9 @@ By default the `scan` command use the SAST scanner, other [scanner types](https:
179
193
180
194
The security report is an easily digestible view of the security issues detected by Bearer. A report is made up of:
181
195
182
-
-The list of [rules](https://docs.bearer.com/reference/rules/) run against your code.
183
-
-Each detected finding, containing the file location and lines that triggered the rule finding.
184
-
-A stat section with a summary of rules checks, findings and warnings.
196
+
* The list of [rules](https://docs.bearer.com/reference/rules/) run against your code.
197
+
* Each detected finding, containing the file location and lines that triggered the rule finding.
198
+
* A stat section with a summary of rules checks, findings and warnings.
185
199
186
200
The [OWASP Juice Shop](https://github.com/juice-shop/juice-shop) example application will trigger rule findings and output a full report. Here's a section of the output:
187
201
@@ -207,7 +221,6 @@ LOW: 0
207
221
WARNING: 0
208
222
```
209
223
210
-
211
224
The security report is just one [report type](https://docs.bearer.com/explanations/reports) available in Bearer.
212
225
213
226
Ready for the next step? Additional options for using and configuring the `scan` command can be found in [configuring the scan command](https://docs.bearer.com/guides/configure-scan/).
@@ -240,7 +253,7 @@ In addition, running Bearer on a scheduled job is a great way to keep track of y
240
253
241
254
### Supported Language
242
255
243
-
Bearer currently supports JavaScript, TypeScript and Ruby and their associated most used frameworks and libraries.
256
+
Bearer currently supports JavaScript, TypeScript and Ruby and their associated most used frameworks and libraries.
244
257
Java support is under active development, more languages will follow.
245
258
246
259
### What makes Bearer different from any other SAST tools?
@@ -269,11 +282,11 @@ By using the most modern static code analysis techniques and providing a native
269
282
270
283
Thanks for using Bearer. Still have questions?
271
284
272
-
-Start with the [documentation](https://docs.bearer.com).
273
-
-Have a question or need some help? Find the Bearer team on [Discord][discord].
274
-
-Got a feature request or found a bug? [Open a new issue](https://github.com/Bearer/bearer/issues/new/choose).
275
-
-Found a security issue? Check out our [Security Policy](https://github.com/Bearer/bearer/security/policy) for reporting details.
276
-
-Find out more at [Bearer.com](https://www.bearer.com)
285
+
* Start with the [documentation](https://docs.bearer.com).
286
+
* Have a question or need some help? Find the Bearer team on [Discord][discord].
287
+
* Got a feature request or found a bug? [Open a new issue](https://github.com/Bearer/bearer/issues/new/choose).
288
+
* Found a security issue? Check out our [Security Policy](https://github.com/Bearer/bearer/security/policy) for reporting details.
289
+
* Find out more at [Bearer.com](https://www.bearer.com)
277
290
278
291
## :handshake: Contributing
279
292
@@ -299,5 +312,4 @@ You are not allowed to provide Bearer to third parties as a hosted or managed se
Copy file name to clipboardExpand all lines: docs/reference/installation.md
+6-1
Original file line number
Diff line number
Diff line change
@@ -44,6 +44,10 @@ sudo apt-get update
44
44
sudo apt-get install bearer
45
45
```
46
46
47
+
**Known issues**
48
+
49
+
- We are currently investigating an [issue](https://github.com/Bearer/bearer/issues/899) which would prevent Bearer to run correctly. If you encounter this bug, we recommend following the Docker installation instructions.
50
+
47
51
### RHEL/CentOS
48
52
49
53
Add repository setting:
@@ -132,6 +136,7 @@ sudo yum -y update bearer
132
136
```
133
137
134
138
### Docker
139
+
135
140
The Docker configurations above uses the latest release, but you may need to tell Docker to explicitly retrieve the latest image:
0 commit comments